On Dec 10, 2010, at 12:02 PM, Howard Chu wrote:
> Good point. In that case it's probably fine as a separate overlay, the =
way it is now. Can we use the schema definition that Isode is using?
Not only yes, but hell yes. Reuse and convergence is a good thing.
( 1.3.6.1.4.1.453.16.2.188 NAME 'authTimestamp'
DESC 'last successful authentication using any method/mech'
EQUALITY generalizedTimeMatch
ORDERING generalizedTimeOrderingMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.24
SINGLE-VALUE NO-USER-MODIFICATION USAGE dsaOperation )
And we use this attribute in our configuration object to enable/disable =
(default disabled).
( 1.3.6.1.4.1.453.16.2.189 NAME 'authTimestamps'
DESC 'enable recording of last successful authentication using =
any method/mech'
EQUALITY booleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
SINGLE-VALUE USAGE dsaOperation )